This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json) Hash identifier: 3vOJDiP13PE87afR1EhLF06miimIyQ4SlJxQChNQn9k= Subject key identifier: 6B:81:76:3E:D6:EE:92:7E:4D:C6:5D:B7:1A:60:66:D5:23:07:AE:41 Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Certificate serial: 019AF1D1EEB444CD67814063E53B887DAA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft Manifest number: 0E6E Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: 5rDQIXA8t2hgGlXKxmMD0VXyibtvGAf+2opqMdQ++gg=) 2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ee:b4:44:cd:67:81:40:63:e5:3b:88:7d:aa:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=6b81763ed6ee927e4dc65db71a6066d52307ae41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:00:ae:f0:f0:00:b0:0c:19:e9:d6:91:f6: 1f:fd:20:88:4c:f8:7c:10:23:f8:02:4c:b3:a7:a0: 25:43:c1:d2:53:10:3f:41:78:f7:9e:d6:57:e9:24: 33:e9:20:f0:3d:5e:a7:f5:f1:6b:4e:bc:bd:83:a5: 8d:eb:1c:02:b0:87:84:a5:25:23:e4:30:f0:0c:32: 2c:44:04:a5:ea:39:7d:bc:30:39:4d:a0:dd:65:ba: d3:f5:78:20:02:e3:5b:76:f1:3b:44:d5:12:40:44: 88:3d:8e:54:13:cd:f6:86:2c:73:3a:f5:c3:5a:07: 91:3e:40:c5:2b:11:17:89:f5:ec:e5:35:76:13:aa: 8c:1e:13:c9:3b:15:23:6c:b1:a2:48:2b:78:ba:ed: e9:59:24:e9:0a:96:33:a3:7f:fb:7f:e4:0b:5f:25: a3:2c:86:dd:71:11:d7:c7:d4:86:21:63:f3:a5:a8: ad:be:a9:4c:fa:61:fc:da:8b:aa:bd:c3:df:0a:17: 78:8b:27:2e:b2:92:a7:e0:57:8e:b4:2e:9e:30:df: e4:bb:f0:ac:ec:da:26:a6:bd:06:99:d9:09:19:db: 1a:01:b0:a7:52:2e:0b:ea:5e:3f:39:ff:10:bd:a8: e2:3a:e6:bf:e6:ad:c1:aa:e7:d8:ae:e2:52:46:73: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:81:76:3E:D6:EE:92:7E:4D:C6:5D:B7:1A:60:66:D5:23:07:AE:41 X509v3 Authority Key Identifier: keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:78:40:b2:25:30:2c:98:6a:98:c3:b3:e4:59:be:c7:4a:b1: ab:74:74:9c:98:f7:75:2c:38:58:bf:5c:dc:5f:01:05:d7:b8: 81:79:48:c4:f0:36:1d:1f:50:c3:03:85:89:82:41:44:0e:ec: 9b:56:99:88:2b:88:ac:61:e1:fb:b7:24:bf:cb:ce:4c:3f:bf: 79:70:1a:e0:c5:b8:b1:51:6d:5e:2c:ea:d8:23:b4:9f:db:19: 9a:15:d1:24:4c:a0:f8:c9:5e:85:9f:a0:51:26:57:da:6f:e1: 01:c3:fc:2c:40:1a:9a:0a:30:08:95:23:2b:ef:9d:a9:72:62: ea:3c:c0:f4:d2:96:89:f6:8b:ad:78:33:1a:ee:06:c2:95:57: 4a:c2:4b:b9:87:a4:b3:39:8d:c7:1d:46:96:1a:2c:21:a4:9a: f6:f7:7b:e2:9d:7c:a9:61:a4:10:fc:b0:36:d6:28:27:f3:05: 14:6f:ab:67:9f:12:a4:9f:51:5b:d8:00:6d:4a:d0:c8:d1:a1: 19:22:c1:38:29:72:b4:b7:9b:00:e1:9d:26:85:9f:be:82:74: f0:32:e0:0f:6e:7c:ad:d1:fd:72:55:f1:42:8d:5c:d3:3d:44: f7:4d:15:df:de:4f:70:88:15:9b:d5:93:8b:1d:97:96:0d:72: 4f:71:c3:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e60RM1ngUBj5TuIfaoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGI4YmRmZjIyZTFhMzdiMGY0YTY5NTM0MjRiNjUxNjli MDM0MjkwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD Eyg2YjgxNzYzZWQ2ZWU5MjdlNGRjNjVkYjcxYTYwNjZkNTIzMDdhZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsgArvDwALAMGenWkfYf/SCITPh8 ECP4Akyzp6AlQ8HSUxA/QXj3ntZX6SQz6SDwPV6n9fFrTry9g6WN6xwCsIeEpSUj 5DDwDDIsRASl6jl9vDA5TaDdZbrT9XggAuNbdvE7RNUSQESIPY5UE832hixzOvXD WgeRPkDFKxEXifXs5TV2E6qMHhPJOxUjbLGiSCt4uu3pWSTpCpYzo3/7f+QLXyWj LIbdcRHXx9SGIWPzpaitvqlM+mH82ouqvcPfChd4iycuspKn4FeOtC6eMN/ku/Cs 7Nompr0GmdkJGdsaAbCnUi4L6l4/Of8QvajiOua/5q3BqufYruJSRnN83wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuBdj7W7pJ+TcZdtxpgZtUjB65BMB8GA1UdIwQY MBaAFBfbi9/yLho3sPSmlTQktlFpsDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAt MzI3MDJkYmQ0YmM3LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAtMzI3MDJkYmQ0YmM3 LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3hAsiUw LJhqmMOz5Fm+x0qxq3R0nJj3dSw4WL9c3F8BBde4gXlIxPA2HR9QwwOFiYJBRA7s m1aZiCuIrGHh+7ckv8vOTD+/eXAa4MW4sVFtXizq2CO0n9sZmhXRJEyg+MlehZ+g USZX2m/hAcP8LEAamgowCJUjK++dqXJi6jzA9NKWifaLrXgzGu4GwpVXSsJLuYek szmNxx1GlhosIaSa9vd74p18qWGkEPywNtYoJ/MFFG+rZ58SpJ9RW9gAbUrQyNGh GSLBOClytLebAOGdJoWfvoJ08DLgD258rdH9clXxQo1c0z1E900V395PcIgVm9WT ix2Xlg1yT3HDIg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:52:49 2025 by rpki-client